Threat Intelligence Platforms

A tool for fetching and visualizing cyber threat intelligence data with Elasticsearch and Kibana integration.

Bindings for the Yara library from VirusTotal with support for Yara v4.2 and various features like rule compilation and scanning.

ThreatNote is a threat intelligence platform that provides real-time updates on emerging cybersecurity threats, vulnerabilities, and attack vectors to help organizations enhance their security posture.

CyBot is a free and open source threat intelligence chat bot with a community-driven plugin framework.

Machinae is a tool for collecting intelligence from public sites/feeds about various security-related pieces of data.

RiskAnalytics Solutions offers community projects for cyber threat intelligence sharing and collaboration.

CINSscore.com provides Threat Intelligence database with accurate IP scores and collective defense through community and Sentinel IPS unit sourced data.

Gathers Threat Intelligence Feeds from publicly available sources and provides detailed output in CSV format.

QRadio is a tool/framework designed to consolidate cyber threats intelligence sources.

Freely available network IOCs for monitoring and incident response

A Python library for interacting with TAXII servers

A modular malware collection and processing framework with support for various threat intelligence feeds.

An open source threat intelligence platform for storing and managing cyber threat intelligence knowledge.

Collect various intelligence sources for hosts in CSV format.

A project focusing on understanding and combating threats to the Internet economy and net citizens.

A daily collection of IOCs from various sources, including articles and tweets.

Provides indicators of compromise (IOCs) to combat malware with Yara and Snort rules.

Aggregator of FireHOL IP lists with HTTP-based API service and Python client package.

A threat intelligence dissemination layer for open-source security tools with STIX-2 support and plugin-based architecture.

A database of Tor exit nodes with their corresponding IP addresses and timestamps.

All-in-one vulnerability intelligence platform for prioritizing remediation efforts and driving security strategies.

Hale is a modular botnet command and control monitoring tool that tracks C&C server communications across multiple protocols with web-based analysis interface and collaborative research capabilities.

A visualization tool for threat analysis that organizes APT campaign information and visualizes relations of IOC.

Repository containing MITRE ATT&CK and CAPEC threat intelligence datasets formatted in STIX 2.0 standard for cybersecurity analysis and threat intelligence sharing.